$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/a770a09a-4dac-3275-b687-3eb54b29b874.roa File: a770a09a-4dac-3275-b687-3eb54b29b874.roa (raw, json) Hash identifier: PetmZtCQC30ZHeVDweax49+q0Mw6x9mNrCTahdyQ6p4= Subject key identifier: 45:72:5A:EC:72:BB:28:47:F7:48:81:F0:D1:73:2D:AD:F9:DA:D2:98 Certificate issuer: /CN=7ed4b7da-afac-4a5d-b987-9835dbc0c0a5 Certificate serial: 010D0C9F43285849F357FBB4564C1AF8FF468400 Authority key identifier: 5F:9C:25:D0:61:90:7F:1A:CA:4B:A9:D2:7C:77:B4:E6:99:F4:8A:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/a770a09a-4dac-3275-b687-3eb54b29b874.roa Signing time: Fri 23 May 2025 16:52:32 +0000 ROA not before: Fri 23 May 2025 16:52:32 +0000 ROA not after: Thu 21 Aug 2025 16:52:32 +0000 asID: 2675 IP address blocks: 199.212.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f3:57:fb:b4:56:4c:1a:f8:ff:46:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed4b7da-afac-4a5d-b987-9835dbc0c0a5 Validity Not Before: May 23 16:52:32 2025 GMT Not After : Aug 21 16:52:32 2025 GMT Subject: CN=973faa7b-4981-4301-9e93-03bf477fc9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:55:77:88:78:d5:65:9f:95:63:77:00:7b:fe: df:9e:44:ce:c2:e5:fd:53:82:8e:df:44:f4:93:cf: 18:d8:29:1f:54:6d:62:e4:59:cd:7c:33:2c:75:8f: 32:45:3e:0c:5f:d2:7b:b4:71:19:99:0a:d7:43:a1: 47:25:65:2d:91:46:bd:84:d0:bd:97:1b:64:49:c8: bb:9f:4b:1e:c9:86:ec:ba:63:1b:2e:1e:8e:59:aa: 86:dd:ca:6a:07:aa:3d:29:cf:18:77:e3:57:0e:36: a3:e0:d3:18:81:66:4a:6f:0a:3b:15:23:bd:18:d1: 03:04:68:50:df:72:71:68:f1:95:0f:1b:29:f0:b0: 72:f5:c8:56:10:5f:70:14:f1:8a:67:b2:55:29:40: 45:3d:3a:53:3f:f3:b0:39:91:0b:d7:a0:d6:ad:cf: d4:3b:8d:d9:2b:89:ae:17:7a:6a:52:2d:2d:8d:a1: d2:8d:c0:38:ed:c6:67:77:6c:be:7c:9e:7f:30:4a: 32:f0:03:50:4e:fa:c5:fc:73:d3:d6:38:89:15:19: b6:bf:f0:d6:26:7f:de:a7:dc:bc:28:c8:ea:8f:2a: 05:3d:e7:78:04:17:ab:f7:9b:43:b0:44:96:a5:83: b2:a3:13:b6:8b:38:0c:fd:08:af:45:fb:5e:a8:b3: 8c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:72:5A:EC:72:BB:28:47:F7:48:81:F0:D1:73:2D:AD:F9:DA:D2:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/a770a09a-4dac-3275-b687-3eb54b29b874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.crl X509v3 Authority Key Identifier: keyid:5F:9C:25:D0:61:90:7F:1A:CA:4B:A9:D2:7C:77:B4:E6:99:F4:8A:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer sbgp-ipAddrBlock: critical IPv4: 199.212.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:0f:75:62:76:d6:7d:df:f5:c0:c4:12:91:f9:26:da:e4:ec: e4:68:44:de:20:5d:8a:d0:3d:af:4f:e1:11:ac:27:3a:c5:ea: b0:da:d5:27:b3:ed:38:65:ab:f7:b5:8a:f2:fb:f5:5a:e6:0f: fa:c6:3a:fe:2e:53:72:5b:f3:0c:fd:29:49:41:d2:4d:04:89: 02:63:ba:85:62:31:3b:b5:09:e4:9e:83:64:6e:6a:57:f7:de: 39:68:13:40:e4:0b:5a:7d:86:bc:93:50:e3:0c:ee:1c:19:a4: fe:6c:29:a9:33:97:19:4e:5a:e1:45:c2:a4:0b:c9:d8:f3:62: 51:bf:d2:90:da:2c:1b:dd:59:8b:04:c6:28:e0:c9:08:5b:c6: 62:ce:9f:81:7e:32:5e:60:29:c5:42:0d:c6:e3:ff:3f:62:8a: e4:36:89:f1:a0:8d:71:2c:1c:c6:dc:53:c7:1d:19:3f:38:20: 9b:c3:3c:0e:93:4b:a1:39:13:82:93:36:47:57:21:76:c8:0a: 73:0a:9d:e5:c3:ac:9f:e5:42:6e:9b:30:0c:a1:8a:37:fb:4e: 5e:50:d8:fa:3a:92:6c:79:00:e0:1b:c0:a1:af:03:c5:fc:f8: 12:fd:22:af:39:43:98:69:74:a2:3e:8e:1e:e5:0f:54:19:39: 70:27:69:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnzV/u0Vkwa+P9GhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VkNGI3ZGEtYWZhYy00YTVkLWI5ODctOTgzNWRiYzBj MGE1MB4XDTI1MDUyMzE2NTIzMloXDTI1MDgyMTE2NTIzMlowLzEtMCsGA1UEAxMk OTczZmFhN2ItNDk4MS00MzAxLTllOTMtMDNiZjQ3N2ZjOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFV3iHjVZZ+VY3cAe/7fnkTOwuX9U4KO30T0 k88Y2CkfVG1i5FnNfDMsdY8yRT4MX9J7tHEZmQrXQ6FHJWUtkUa9hNC9lxtkSci7 n0seyYbsumMbLh6OWaqG3cpqB6o9Kc8Yd+NXDjaj4NMYgWZKbwo7FSO9GNEDBGhQ 33JxaPGVDxsp8LBy9chWEF9wFPGKZ7JVKUBFPTpTP/OwOZEL16DWrc/UO43ZK4mu F3pqUi0tjaHSjcA47cZnd2y+fJ5/MEoy8ANQTvrF/HPT1jiJFRm2v/DWJn/ep9y8 KMjqjyoFPed4BBer95tDsESWpYOyoxO2izgM/QivRfteqLOMTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVyWuxyuyhH90iB8NFzLa352tKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83ZWQ0 YjdkYS1hZmFjLTRhNWQtYjk4Ny05ODM1ZGJjMGMwYTUvYTc3MGEwOWEtNGRhYy0z Mjc1LWI2ODctM2ViNTRiMjliODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvN2VkNGI3ZGEtYWZhYy00YTVkLWI5 ODctOTgzNWRiYzBjMGE1LzdlZDRiN2RhLWFmYWMtNGE1ZC1iOTg3LTk4MzVkYmMw YzBhNS5jcmwwHwYDVR0jBBgwFoAUX5wl0GGQfxrKS6nSfHe05pn0iiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83ZWQ0YjdkYS1hZmFjLTRhNWQtYjk4Ny05ODM1 ZGJjMGMwYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9TUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoPdWJ21n3f9cDEEpH5Jtrk7ORoRN4gXYrQPa9P4RGsJzrF6rDa1Sez 7Thlq/e1ivL79VrmD/rGOv4uU3Jb8wz9KUlB0k0EiQJjuoViMTu1CeSeg2Rualf3 3jloE0DkC1p9hryTUOMM7hwZpP5sKakzlxlOWuFFwqQLydjzYlG/0pDaLBvdWYsE xijgyQhbxmLOn4F+Ml5gKcVCDcbj/z9iiuQ2ifGgjXEsHMbcU8cdGT84IJvDPA6T S6E5E4KTNkdXIXbICnMKneXDrJ/lQm6bMAyhijf7Tl5Q2Po6kmx5AOAbwKGvA8X8 +BL9Iq85Q5hpdKI+jh7lD1QZOXAnaSI= -----END CERTIFICATE-----Generated at Thu Jun 19 02:35:13 2025 by rpki-client